The right way of updating server and clients...

[mygitcrazy]

Question,

What would be the right way of updating the server and the clients?

The reason why I ask this, is because when we last update our selfhosted version from v.014.4 to v.014.5, we first updated some clients and then the server itself.

After the update the ACL rules didn't work anymore, and we had to reinstall every client and reorder the ACL rules to make the clients talk to each other again.

So my question is, what would be to correct way for the next release to update? First the main server itself and then the clients? I guess....

Thanks by the way for your great work on Netbird, really appreciate it 👍

[mlsmaycon]

Hello @mygitcrazy sorry to see that this happened to you. On v0.14.5, we've migrated our custom rules to use OPA policies, which will provide more flexibility and will allow us to use some advanced features.

Regarding the upgrade order, they should work in either case. If you upgrade agents or servers, we prepare the migration and agent compatibility to prevent these issues from happening.

Even with our test, we should have noticed something. Please share more information so we can validate a few things and reproduce your case. Can you share the following:
1 - confirm if you are running on v0.14.5 for the agents and the management server.
2 - After upgrading the agents and not the management, were the peers able to communicate according to the ACLs?
3 - example of the access control rules you had in place before the upgrade

[mlsmaycon]

@mygitcrazy we've released a fix for the issues you faced. The latest v0.14.6 contains the fix, please upgrade you management server.

[mygitcrazy]

@mlsmaycon hi there,
Unfortunately I was down with the flu this week, so wasn't able to test the new version. Once I feel a little better, I come back with the update results...

[mlsmaycon]

no worries @mygitcrazy , get well soon

[mygitcrazy]

@mlsmaycon I have updated every client now, included the main interface and I can report that everything is fully functional.
I will keep an eye on everything, but for now all seems OK.

Thanks for your great support😉👍

Ps
I will close this discussion in a few days...

[mlsmaycon]

That's great @mygitcrazy, thanks for checking and providing the information needed to fix the issue.